CVE-2010-4056

Опубликовано: 23 окт. 2010

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TCP session on port 1315.

Комментарий

Per: http://cwe.mitre.org/data/definitions/476.html

'CWE-476: NULL Pointer Dereference'

Ссылки

http://aluigi.altervista.org/adv/soliddb_1-adv.txt
Exploit
http://secunia.com/advisories/41873
Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261
Exploit
http://www.vupen.com/english/advisories/2010/2715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590
http://aluigi.altervista.org/adv/soliddb_1-adv.txt
Exploit
http://secunia.com/advisories/41873
Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261
Exploit
http://www.vupen.com/english/advisories/2010/2715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*

Версия до 6.5.0.3 (включая)

cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.1.20:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.3.33:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.3.37:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0039:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0040:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0044:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:06.30.0047:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08775

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-f7cj-p2gc-6mpq

github

больше 3 лет назад